Changes between Version 36 and Version 37 of SPIDocs

Timestamp:

Jan 15, 2015 5:25:59 PM (9 years ago)

Author:

faber

Comment:

--

SPIDocs

@@ -291 +291 @@
 Once the user is created through this interface, that user has very few rights because it is not a member of an [wiki:SPIDocs#Projects approved project].  It can reset its password and either create a project or attempt to join an existing one.
 
+When a new user is created, that user is temporarily logged in and can issue `createProject` and `joinProject` requests.  That grace period is currently 30 minutes.  After that time elapses, the user must set their password by responding to the e-mail sent by the `createUser` request.
+
+This grace period is intended to make the user's experience joining the testbed and creating their first project more seamless.  They need not leave the UI to validate their account before making their first `createProject` or `joinProject` requests.
+
 ==== Administrative Operations ====
 
@@ -350 +354 @@
 
 When a user finds a project the would like to join, usually through some out of band mechanism, they call the `joinProject` operation on the `Projects` [wiki:SPIDocs#Services service].  This registers the user's intention to join and sends a [wiki:SPIDocs#Notifications notification] to members of the project who have the right to add users to it.  This notification includes a challenge that is similar in format to the [wiki:SPIDocs#PasswordManagement requestPasswordChange] challenge.  As with that operation, an application can include a URL prefix that will be prepended to the challenge in the notification.
+
+When a new user is created, that user is temporarily logged in and can issue `joinProject` requests.  That grace period is currently 30 minutes.  After that time elapses, the user must set their password by responding to the e-mail sent by the `createUser` request.
+
+This grace period is intended to make the user's experience joining the testbed and creating their first project more seamless.  They need not leave the UI to validate their account before making their first `createProject` or `joinProject` requests.
 
 One of the users receiving the notification can then call `joinProjectConfirm` with the challenge and a list of [wiki:SPIDocs#ProjectPermissions permissions] that the user will be assigned.  When that operation completes, the user is a member of the project with the associated rights.  The user calling `joinProjectConfirm` must have the `ADD_USER` right and similarly cannot confer more rights than they have.